Information security stakeholders in the private and public sectors are collaborating on the CAM initiative, which is to be implemented on a global scale. CAM developers are working to ensure that safety measures in cloud computing and third party service providers are standardised, providing a quantifiable method of comparing hosts.
The Cloud Security Alliance are in favour of the initiative, executive director, Jim Reavis said. "With today's complex IT architectures and heavy reliance upon third party providers, there has never been a greater demand for transparency and objective metrics for attestation, The Common Assurance Metric framework has great promise to address this demand and the Cloud Security Alliance is proud to support this initiative and align our own cloud security metrics research with it."
Matt Broda, Microsoft senior security strategist, supports the project and has suggested that the key players in the industry must work together in order to make the initiative work. Broda said: "Microsoft is committed to delivering secure, private, and reliable computing experiences. In today's interconnected world, trustworthiness of computing solutions depends on many interdependent components and requires broad industry collaboration. We look forward to contributing to the work on Common Assurance Metric.
The framework of CAM is set to be delivered by the end of 2010 and will be welcomed by the Information Security Awareness Forum (ISAF). ISAF's chairman, David King, said: “ISAF is committed to improving accessibility of advice through the promotion of consistent messages to help protect individuals and businesses alike. The Common Assurance Metric is a bold initiative that aspires to provide greater consistency in the security of cloud computing services. This will help to make the Internet a safer place for business and pleasure - an objective which the ISAF very much supports.”